On Apr 3, 12:49 am, "BertieBigBol...@gmail.com"
<BertieBigBol...@gmail.com> wrote:
> I've since found this :-
>
> developers.sun.com/solaris/driverdev/reference/codesamples/
> usb_security/index.html

Tried this - works really well.

Advantage this has over the other method is that if you disable the
usb storage then no usb storage will work at all (which is fine if you
dont mind).

With this method, you first take a checkpoint of the current usb
bindings, and then run the script to lock down. The advantage is that
current usb devices (which are currently plugged in) are still kept
(so mouse and keyboard are OK).

If you subsequently want to allow a specific device, you just need to
restore the usb bindings (from the checkpoint), plug in the device,
and lock down again.

Only problem I found is that when you perform the lock down script,
you need to check that it has kept the keyboard and mouse bindings.
Once or twice I had to remove/replug the kbd/mouse before it
recognised it as current device.

Of course, you can get your self into possible problems if you've
disabled the usb mouse and keyboard and then reboot !!!! (Just make
sure you can telnet into the machine to change it back !!!!).